Skip to content

Commit

Permalink
Merge pull request #1928 from CalebZoe/revert-2
Browse files Browse the repository at this point in the history
Revert "[Catalog] Update Catalog items"
  • Loading branch information
vishalvivekm authored Oct 11, 2024
2 parents 1c74741 + 22af13a commit 79d04d7
Show file tree
Hide file tree
Showing 201 changed files with 4,148 additions and 0 deletions.
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
---
layout: item
name: Example Labels and Annotations
publishedVersion: 0.0.1
userId: 090e7114-509a-4046-81f1-9c5fb8daf724
userName: Lee Calcote
userAvatarURL: https://pbs.twimg.com/profile_images/880205475643441152/V_vhfnzb_400x400.jpg
type: deployment
compatibility:
- kubernetes
patternId: 02413809-9fbf-4649-ae22-3d0947d264c6
image: /assets/images/logos/service-mesh-pattern.svg
patternInfo: |
This%20design%20contains%20example%20of%20how%20label%20and%20annotation%20can%20be%20created%20and%20organised
patternCaveats: |
No%20caveats
permalink: catalog/deployment/example-labels-and-annotations-02413809-9fbf-4649-ae22-3d0947d264c6.html
URL: 'https://raw.githubusercontent.com/meshery/meshery.io/master/catalog/02413809-9fbf-4649-ae22-3d0947d264c6/0.0.1/design.yml'
downloadLink: 02413809-9fbf-4649-ae22-3d0947d264c6/design.yml
---
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
---
layout: item
name: 'Dapr '
publishedVersion: 0.0.5
userId: 969bfd5e-28fb-4c20-a020-ee9db65da812
userName: Aabid Sofi
userAvatarURL:
type: deployment
compatibility:
- dapr
patternId: 04cf78e7-6041-45f7-bca5-999d5d7d6a19
image: https://raw.githubusercontent.com/layer5labs/meshery-extensions-packages/master/action-assets/design-assets/04cf78e7-6041-45f7-bca5-999d5d7d6a19-light.png,https://raw.githubusercontent.com/layer5labs/meshery-extensions-packages/master/action-assets/design-assets/04cf78e7-6041-45f7-bca5-999d5d7d6a19-dark.png
patternInfo: |
A%20standard%20Dapr%20control%20plane%20design.
patternCaveats: |
none
permalink: catalog/deployment/dapr-04cf78e7-6041-45f7-bca5-999d5d7d6a19.html
URL: 'https://raw.githubusercontent.com/meshery/meshery.io/master/catalog/04cf78e7-6041-45f7-bca5-999d5d7d6a19/0.0.5/design.yml'
downloadLink: 04cf78e7-6041-45f7-bca5-999d5d7d6a19/design.yml
---
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
---
layout: item
name: Istio Operator
publishedVersion: 0.0.1
userId: 1cb30087-3787-4aad-8da8-addcb556ae17
userName: Bhuminjay Soni
userAvatarURL: https://avatars.githubusercontent.com/u/76656712?v=4
type: deployment
compatibility:
- istio-operator
patternId: 06ef6097-8f21-4a76-b025-0c9271168814
image: https://raw.githubusercontent.com/layer5labs/meshery-extensions-packages/master/action-assets/design-assets/06ef6097-8f21-4a76-b025-0c9271168814-light.png,https://raw.githubusercontent.com/layer5labs/meshery-extensions-packages/master/action-assets/design-assets/06ef6097-8f21-4a76-b025-0c9271168814-dark.png
patternInfo: |
This%20YAML%20defines%20a%20Kubernetes%20Deployment%20for%20the%20Istio%20Operator%20within%20the%20istio-operator%20namespace.%20The%20deployment%20ensures%20a%20single%20replica%20of%20the%20Istio%20Operator%20pod%20is%20always%20running%2C%20which%20is%20managed%20by%20a%20service%20account%20named%20istio-operator.%20The%20deployment's%20metadata%20includes%20the%20namespace%20and%20the%20deployment%20name.%20The%20pod%20selector%20matches%20pods%20with%20the%20label%20name%3A%20istio-operator%2C%20ensuring%20the%20correct%20pods%20are%20managed.%20The%20pod%20template%20specifies%20metadata%20and%20details%20for%20the%20containers%2C%20including%20the%20container%20name%20istio-operator%20and%20the%20image%20gcr.io%2Fistio-testing%2Foperator%3A1.5-dev%2C%20which%20runs%20the%20istio-operator%20command%20with%20the%20server%20argument.
patternCaveats: |
1.%20Namespace%20Configuration%3A%20Ensure%20that%20the%20istio-operator%20namespace%20exists%20before%20applying%20this%20deployment.%20If%20the%20namespace%20is%20not%20present%2C%20the%20deployment%20will%20fail.%0A%0A2.%20Image%20Version%3A%20The%20image%20specified%20(gcr.io%2Fistio-testing%2Foperator%3A1.5-dev)%20is%20a%20development%20version.%20It%20is%20crucial%20to%20verify%20the%20stability%20and%20compatibility%20of%20this%20version%20for%20production%20environments.%20Using%20a%20stable%20release%20version%20is%20generally%20recommended.%0A%0A3.%20Resource%20Allocation%3A%20The%20resource%20limits%20and%20requests%20are%20set%20to%20specific%20values%20(200m%20CPU%2C%20256Mi%20memory%20for%20limits%3B%2050m%20CPU%2C%20128Mi%20memory%20for%20requests).%20These%20values%20should%20be%20reviewed%20and%20adjusted%20based%20on%20the%20actual%20resource%20availability%20and%20requirements%20of%20your%20Kubernetes%20cluster%20to%20prevent%20resource%20contention%20or%20overallocation.%0A%0A4.%20Leader%20Election%3A%20The%20environment%20variables%20include%20LEADER_ELECTION_NAMESPACE%20which%20is%20derived%20from%20the%20pod's%20namespace.%20Ensure%20that%20the%20leader%20election%20mechanism%20is%20properly%20configured%20and%20that%20only%20one%20instance%20of%20the%20operator%20becomes%20the%20leader%20to%20avoid%20conflicts.%0A%0A5.%20Security%20Context%3A%20The%20deployment%20does%20not%20specify%20a%20security%20context%20for%20the%20container.%20It%20is%20advisable%20to%20review%20and%20define%20appropriate%20security%20contexts%20to%20enhance%20the%20security%20posture%20of%20the%20deployment%2C%20such%20as%20running%20the%20container%20as%20a%20non-root%20user.
permalink: catalog/deployment/istio-operator-06ef6097-8f21-4a76-b025-0c9271168814.html
URL: 'https://raw.githubusercontent.com/meshery/meshery.io/master/catalog/06ef6097-8f21-4a76-b025-0c9271168814/0.0.1/design.yml'
downloadLink: 06ef6097-8f21-4a76-b025-0c9271168814/design.yml
---
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
---
layout: item
name: Fault-tolerant batch workloads on GKE
publishedVersion: 0.0.1
userId: 62b081a5-1273-4c58-807f-b6be539275d0
userName: Shubham Pandey
userAvatarURL:
type: deployment
compatibility:
- kubernetes
patternId: 08379ae3-cd9e-4b55-a190-91a47a1ff638
image: https://raw.githubusercontent.com/layer5labs/meshery-extensions-packages/master/action-assets/design-assets/08379ae3-cd9e-4b55-a190-91a47a1ff638-light.png,https://raw.githubusercontent.com/layer5labs/meshery-extensions-packages/master/action-assets/design-assets/08379ae3-cd9e-4b55-a190-91a47a1ff638-dark.png
patternInfo: |
A%20batch%20workload%20is%20a%20process%20typically%20designed%20to%20have%20a%20start%20and%20a%20completion%20point.%20You%20should%20consider%20batch%20workloads%20on%20GKE%20if%20your%20architecture%20involves%20ingesting%2C%20processing%2C%20and%20outputting%20data%20instead%20of%20using%20raw%20data.%20Areas%20like%20machine%20learning%2C%20artificial%20intelligence%2C%20and%20high%20performance%20computing%20(HPC)%20feature%20different%20kinds%20of%20batch%20workloads%2C%20such%20as%20offline%20model%20training%2C%20batched%20prediction%2C%20data%20analytics%2C%20simulation%20of%20physical%20systems%2C%20and%20video%20processing.%0A%0ABy%20designing%20containerized%20batch%20workloads%2C%20you%20can%20leverage%20the%20following%20GKE%20benefits%3A%0A%0AAn%20open%20standard%2C%20broad%20community%2C%20and%20managed%20service.%0ACost%20efficiency%20from%20effective%20workload%20and%20infrastructure%20orchestration%20and%20specialized%20compute%20resources.%0AIsolation%20and%20portability%20of%20containerization%2C%20allowing%20the%20use%20of%20cloud%20as%20overflow%20capacity%20while%20maintaining%20data%20security.%0AAvailability%20of%20burst%20capacity%2C%20followed%20by%20rapid%20scale%20down%20of%20GKE%20clusters.
patternCaveats: |
Ensure%20proper%20networking%20of%20components%20for%20efficient%20functioning
permalink: catalog/deployment/fault-tolerant-batch-workloads-on-gke-08379ae3-cd9e-4b55-a190-91a47a1ff638.html
URL: 'https://raw.githubusercontent.com/meshery/meshery.io/master/catalog/08379ae3-cd9e-4b55-a190-91a47a1ff638/0.0.1/design.yml'
downloadLink: 08379ae3-cd9e-4b55-a190-91a47a1ff638/design.yml
---
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
---
layout: item
name: default-ns
publishedVersion: 0.0.1
userId: a550f4d6-d3bd-44f1-9b4c-167114452062
userName: Pranav Singh
userAvatarURL: https://avatars.githubusercontent.com/u/73700530?v=4
type: deployment
compatibility:
- kubernetes
patternId: 0a2d8c39-df40-490b-94b7-75d0fb7fc207
image: /assets/images/logos/service-mesh-pattern.svg
patternInfo: |
This is a sample default namespace that can be used for testing.
patternCaveats: |
No caveats. Feel free to reuse.
permalink: catalog/deployment/default-ns-0a2d8c39-df40-490b-94b7-75d0fb7fc207.html
URL: 'https://raw.githubusercontent.com/meshery/meshery.io/master/catalog/0a2d8c39-df40-490b-94b7-75d0fb7fc207/0.0.1/design.yml'
downloadLink: 0a2d8c39-df40-490b-94b7-75d0fb7fc207/design.yml
---
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
---
layout: item
name: Run DaemonSet on GKE Autopilot
publishedVersion: 0.0.1
userId: 62b081a5-1273-4c58-807f-b6be539275d0
userName: Shubham Pandey
userAvatarURL:
type: deployment
compatibility:
- kubernetes
patternId: 0aa86dd0-415c-4bf8-ae76-832560470b74
image: https://raw.githubusercontent.com/layer5labs/meshery-extensions-packages/master/action-assets/design-assets/0aa86dd0-415c-4bf8-ae76-832560470b74-light.png,https://raw.githubusercontent.com/layer5labs/meshery-extensions-packages/master/action-assets/design-assets/0aa86dd0-415c-4bf8-ae76-832560470b74-dark.png
patternInfo: |
GKE%20uses%20the%20total%20size%20of%20your%20deployed%20workloads%20to%20determine%20the%20size%20of%20the%20nodes%20that%20Autopilot%20provisions%20for%20the%20cluster.%20If%20you%20add%20or%20resize%20a%20DaemonSet%20after%20Autopilot%20provisions%20a%20node%2C%20GKE%20won't%20resize%20existing%20nodes%20to%20accommodate%20the%20new%20total%20workload%20size.%20DaemonSets%20with%20resource%20requests%20larger%20than%20the%20allocatable%20capacity%20of%20existing%20nodes%2C%20after%20accounting%20for%20system%20pods%2C%20also%20won't%20get%20scheduled%20on%20those%20nodes.%0A%0AStarting%20in%20GKE%20version%201.27.6-gke.1248000%2C%20clusters%20in%20Autopilot%20mode%20detect%20nodes%20that%20can't%20fit%20all%20DaemonSets%20and%2C%20over%20time%2C%20migrate%20workloads%20to%20larger%20nodes%20that%20can%20fit%20all%20DaemonSets.%20This%20process%20takes%20some%20time%2C%20especially%20if%20the%20nodes%20run%20system%20Pods%2C%20which%20need%20extra%20time%20to%20gracefully%20terminate%20so%20that%20there's%20no%20disruption%20to%20core%20cluster%20capabilities.%0A%0AIn%20GKE%20version%201.27.5-gke.200%20or%20earlier%2C%20we%20recommend%20cordoning%20and%20draining%20nodes%20that%20can't%20accommodate%20DaemonSet%20Pods.
patternCaveats: |
For%20all%20GKE%20versions%2C%20we%20recommend%20the%20following%20best%20practices%20when%20deploying%20DaemonSets%20on%20Autopilot%3A%0A%0ADeploy%20DaemonSets%20before%20any%20other%20workloads.%0ASet%20a%20higher%20PriorityClass%20on%20DaemonSets%20than%20regular%20Pods.%20The%20higher%20PriorityClass%20lets%20GKE%20evict%20lower-priority%20Pods%20to%20accommodate%20DaemonSet%20pods%20if%20the%20node%20can%20accommodate%20those%20pods.%20This%20helps%20to%20ensure%20that%20the%20DaemonSet%20is%20present%20on%20each%20node%20without%20triggering%20node%20recreation.%0A
permalink: catalog/deployment/run-daemonset-on-gke-autopilot-0aa86dd0-415c-4bf8-ae76-832560470b74.html
URL: 'https://raw.githubusercontent.com/meshery/meshery.io/master/catalog/0aa86dd0-415c-4bf8-ae76-832560470b74/0.0.1/design.yml'
downloadLink: 0aa86dd0-415c-4bf8-ae76-832560470b74/design.yml
---
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
---
layout: item
name: Key cloak operator
publishedVersion: 0.0.1
userId: 1cb30087-3787-4aad-8da8-addcb556ae17
userName: Bhuminjay Soni
userAvatarURL: https://avatars.githubusercontent.com/u/76656712?v=4
type: deployment
compatibility:
- keycloak-operator
patternId: 0e426f91-14df-4f70-b6cc-ed3624d53ccd
image: https://raw.githubusercontent.com/layer5labs/meshery-extensions-packages/master/action-assets/design-assets/0e426f91-14df-4f70-b6cc-ed3624d53ccd-light.png,https://raw.githubusercontent.com/layer5labs/meshery-extensions-packages/master/action-assets/design-assets/0e426f91-14df-4f70-b6cc-ed3624d53ccd-dark.png
patternInfo: |
This%20YAML%20snippet%20describes%20a%20Kubernetes%20Deployment%20for%20a%20Keycloak%20operator%2C%20ensuring%20a%20single%20replica.%20It%20specifies%20labels%20and%20annotations%20for%20metadata%2C%20including%20a%20service%20account.%20The%20pod%20template%20defines%20a%20container%20running%20the%20Keycloak%20operator%20image%2C%20with%20environment%20variables%20set%20for%20namespace%20and%20pod%20name%20retrieval.%20Security%20context%20settings%20prevent%20privilege%20escalation.%20Probes%20are%20configured%20for%20liveness%20and%20readiness%20checks%20on%20port%208081%2C%20with%20resource%20requests%20and%20limits%20ensuring%20proper%20resource%20allocation%20for%20the%20container.
patternCaveats: |
1.%20Single%20Replica%3A%20The%20configuration%20specifies%20only%20one%20replica%2C%20which%20means%20there's%20no%20built-in%20redundancy%20or%20high%20availability.%20Consider%20adjusting%20the%20replica%20count%20based%20on%20your%20availability%20requirements.%0A%0A2.%20Resource%20Allocation%3A%20Resource%20requests%20and%20limits%20are%20set%20for%20CPU%20and%20memory.%20Ensure%20these%20values%20are%20appropriate%20for%20your%20workload%20and%20cluster%20capacity%20to%20avoid%20performance%20issues%20or%20resource%20contention.%0A%0A3.%20Security%20Context%3A%20The%20security%20context%20is%20configured%20to%20run%20the%20container%20as%20a%20non-root%20user%20and%20disallow%20privilege%20escalation.%20Ensure%20these%20settings%20align%20with%20your%20security%20policies%20and%20container%20requirements.%0A%0A4.%20Probes%20Configuration%3A%20Liveness%20and%20readiness%20probes%20are%20set%20up%20to%20check%20the%20health%20of%20the%20container%20on%20port%208081.%20Ensure%20that%20the%20specified%20endpoints%20(%2Fhealthz%20and%20%2Freadyz)%20are%20correctly%20implemented%20in%20the%20application%20code.%0A%0A5.%20Namespace%20Configuration%3A%20The%20WATCH_NAMESPACE%20environment%20variable%20is%20set%20to%20an%20empty%20string%2C%20potentially%20causing%20the%20operator%20to%20watch%20all%20namespaces.%20Ensure%20this%20behavior%20aligns%20with%20your%20intended%20scope%20of%20operation%20and%20namespace%20isolation%20requirements.
permalink: catalog/deployment/key-cloak-operator-0e426f91-14df-4f70-b6cc-ed3624d53ccd.html
URL: 'https://raw.githubusercontent.com/meshery/meshery.io/master/catalog/0e426f91-14df-4f70-b6cc-ed3624d53ccd/0.0.1/design.yml'
downloadLink: 0e426f91-14df-4f70-b6cc-ed3624d53ccd/design.yml
---
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
---
layout: item
name: mTLS-handshake-acceleration-for-Istio
publishedVersion: 0.0.1
userId: 969bfd5e-28fb-4c20-a020-ee9db65da812
userName: Aabid Sofi
userAvatarURL:
type: deployment
compatibility:
- istio-base
- istio-operator
- kubernetes
patternId: 104be089-dae0-4d09-be70-c1d121673119
image: https://raw.githubusercontent.com/layer5labs/meshery-extensions-packages/master/action-assets/design-assets/104be089-dae0-4d09-be70-c1d121673119-light.png,https://raw.githubusercontent.com/layer5labs/meshery-extensions-packages/master/action-assets/design-assets/104be089-dae0-4d09-be70-c1d121673119-dark.png
patternInfo: |
Cryptographic operations are among the most compute-intensive and critical operations when it comes to secured connections. Istio uses Envoy as the “gateways/sidecar” to handle secure connections and intercept the traffic. Depending upon use cases, when an ingress gateway must handle a large number of incoming TLS and secured service-to-service connections through sidecar proxies, the load on Envoy increases. The potential performance depends on many factors, such as size of the cpuset on which Envoy is running, incoming traffic patterns, and key size. These factors can impact Envoy serving many new incoming TLS requests. To achieve performance improvements and accelerated handshakes, a new feature was introduced in Envoy 1.20 and Istio 1.14. It can be achieved with 3rd Gen Intel® Xeon® Scalable processors, the Intel® Integrated Performance Primitives (Intel® IPP) crypto library, CryptoMB Private Key Provider Method support in Envoy, and Private Key Provider configuration in Istio using ProxyConfig.
patternCaveats: |
Ensure networking is setup properly and correct annotation are applied to each resource for custom Intel configuration
permalink: catalog/deployment/mtls-handshake-acceleration-for-istio-104be089-dae0-4d09-be70-c1d121673119.html
URL: 'https://raw.githubusercontent.com/meshery/meshery.io/master/catalog/104be089-dae0-4d09-be70-c1d121673119/0.0.1/design.yml'
downloadLink: 104be089-dae0-4d09-be70-c1d121673119/design.yml
---
Original file line number Diff line number Diff line change
@@ -0,0 +1,20 @@
---
layout: item
name: my first app design
publishedVersion: 0.0.1
userId: 4d90d649-c4b8-42b8-adc6-51702129cb05
userName: sonal singh
userAvatarURL:
type: deployment
compatibility:
- kubernetes
patternId: 114c94c9-052b-46a2-86fe-4cdd2e88c746
image: https://raw.githubusercontent.com/layer5labs/meshery-extensions-packages/master/action-assets/design-assets/114c94c9-052b-46a2-86fe-4cdd2e88c746-light.png,https://raw.githubusercontent.com/layer5labs/meshery-extensions-packages/master/action-assets/design-assets/114c94c9-052b-46a2-86fe-4cdd2e88c746-dark.png
patternInfo: |
This infrastructure design defines two services within a system: 1. **Customer Service**: - Type: Customer - Version: 0.0.50 - Model: Jira Service Desk Operator - Attributes: This service is configured with specific settings, including an email address, legacy customer mode, and a name. It is categorized as a tool within the system.2. **Notebook Service**: - Type: Notebook - Version: 1.6.1 - Model: Kubeflow - Attributes: This service is categorized as a machine learning tool. It has metadata related to its source URI and appearance. These services are components within a larger system or design, each serving a distinct purpose. The Customer Service is associated with customer-related operations, while the Notebook Service is related to machine learning tasks.
patternCaveats: |
Make sure to use correct credentials for Jira service operator
permalink: catalog/deployment/my-first-app-design-114c94c9-052b-46a2-86fe-4cdd2e88c746.html
URL: 'https://raw.githubusercontent.com/meshery/meshery.io/master/catalog/114c94c9-052b-46a2-86fe-4cdd2e88c746/0.0.1/design.yml'
downloadLink: 114c94c9-052b-46a2-86fe-4cdd2e88c746/design.yml
---
Loading

0 comments on commit 79d04d7

Please sign in to comment.